4 matches found
CVE-2026-116248
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to them. The create and update endpoints of the server API, however, stored the "shared" flag and shared username they were sent, so any user able to register a...
CVE-2026-116248
In pgAdmin 4 (versions before 9.19 ), a logic flaw in the server API and servers.json import allows non-administrators to share a server with all users. Although the UI restricts the "Shared" switch to administrators, the create and update endpoints fail to validate the user's permissions, storin...
EUVD-2026-114389
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to them. The create and update endpoints of the server API, however, stored the "shared" flag and shared username they were sent, so any user able to register a...
CVE-2026-116248: pgadmin.org pgAdmin 4: In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the…
In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to them. The create and update endpoints of the server API, however, stored the "shared" flag and shared username they were sent, so any user able to register a...